IBM Cybersecurity Analyst Professional Certificate Assessment Exam Answers

IBM Cybersecurity Analyst Professional Certificate Assessment Exam Quiz Answers

Alarm: Jo Respond Greenish hai wo correct hai but

Jo Dark-green Nahi hai. Usme se jo ek wrong selection tha usko hata diya hai

Question 1)

Implementing a Security Awareness preparation programme would be an example of which type of control?

  • Administrative command

Question 2)

Putting locks on a door is an example of which type of control?

  • Preventative

Question 3)

How would you classify a piece of malicious code that can replicate itself and spread to new systems?

  • A worm

Question four)

To engage in package sniffing, y'all must implement promiscuous mode on which device ?

  • A network card
  • An Intrusion Detection System (IDS)
  • A sniffing router

Question v)

Which mechanism would help assure the integrity of a message, merely non practise much to assure confidentiality or availability.

  • Hashing

Question 6)

An system wants to restrict employee later-hours access to its systems so information technology publishes a policy forbidding employees to work outside of their assigned hours, and and then makes certain the office doors remain locked on weekends. What two (2) types of controls are they using? (Select two)

  • Physical
  • Authoritative

Question vii)

Which two factors contribute to cryptographic strength? (Select two)

  • The use of cyphers that are based on complex mathematical algorithms
  • The apply of cyphers that accept undergone public scrutiny

Question 8)

Trying to suspension an encryption primal by trying every possible combination of characters is called what?

  • A creature forcefulness attack

Question ix)

Which of the following describes the core goals of Information technology security?

  • The Open Web Application Security Project (OWASP) Framework
  • The Business organisation Process Direction Framework
  • The CIA Triad

Question 10)

Which three (iii) roles are typically establish in an Data Security organization? (Select 3)

  • Vulnerability Assessor
  • Master Information Security Officer (CISO)
  • Penetration Tester

Question 11)

Trouble Direction, Alter Management, and Incident Direction are all cardinal processes of which framework?

  • ITIL

Question 12)

Alice sends a message to Bob that is intercepted past Trudy. Which scenario describes an integrity violation?

  • Trudy changes the bulletin and and then forwards it on
  • Trudy deletes the message without forwarding it
  • Trudy reads the message
  • Trudy cannot read it considering information technology is encrypted merely allows it to be delivered to Bob in its original form

Question 13)

In cybersecurity, Accountability is divers as what?

  • Beingness able to map an action to an identity

Question fourteen)

Multifactor authentication (MFA) requires more than than one hallmark method to be used before identity is authenticated. Which 3 (3) are authentication methods? (Select iii)

  • Something a person is
  • Something a person has
  • Something a person knows

Question fifteen)

Which three (iii) of the following are Physical Access Controls? (Select 3)

  • Door locks
  • Security guards
  • Fences

Question 16)

If you are setting upwardly a Windows 10 laptop with a 32Gb hard drive, which 2 (2) file system could y'all select? (Select ii)

  • NTFS
  • FAT32

Question 17)

Which iii (iii) permissions can exist set on a file in Linux? (Select 3)

  • write
  • execute
  • read

Question 18)

If cost is the primary concern, which type of cloud should be considered kickoff?

  • Public cloud

Question 19)

Consolidating and virtualizing workloads should exist done when?

  • Earlier moving the workloads to the cloud

Question xx)

Which of the following is a self-regulating standard set up by the credit card industry in the US?

  • PCI-DSS

Question 21)

Which two (ii) of the following assault types target endpoints?

  • Ad Network
  • Spear Phishing

Question 22)

If an Endpoint Detection and Response (EDR) system detects that an endpoint does not have a required patch installed, which statement best characterizes the actions it is able to take automatically?

  • The endpoint can be quarantined from all network resource except those that allow information technology to download and install the missing patch

Question 23)

Granting access to a user based upon how high upwardly he is in an system violates what basic security premise?

  • The principle of to the lowest degree privileges

Question 24)

The Windows Security App available in Windows ten provides uses with which of the following protections?

  • Firewall and network protection
  • Family options (parental controls)
  • All of the to a higher place

Question 25)

Hashing ensures which of the following?

  • Integrity

Question 26)

Which of the post-obit practices helps clinch the best results when implementing encryption?

  • Choose a reliable and proven published algorithm
  • Develop a unique cryptographic algorithm for your system and keep them secret

Question 27)

Which of these methods ensures the authentication, non-repudiation and integrity of a digital advice?

  • Use of digital signatures

Question 28)

Which of the post-obit practices will help clinch the confidentiality of data in transit?

  • Disable document pinning
  • Accept self-signed certificates
  • Implement HTTP Strict Transport Protocol (HSTS)

Question 29)

Which three (3) of these are benefits y'all can realize from using a NAT (Network Address Translation) router? (Select 3)

  • Allows static ane-to-1 mapping of local IP addresses to global IP addresses
  • Allows dynamic mapping of many local IP addresses to a smaller number of global IP accost only when they are needed
  • Allows internal IP addresses to be subconscious from exterior observers

Question 30)

Which statement best describes configuring a NAT router to use static mapping?

  • The organization will demand as many registered IP addresses as it has computers that need Internet admission

Question 31)

If a calculator needs to ship a message to a system that is office of the local network, where does it send the message?

  • To the system'due south MAC address

Question 32)

Which are properties of a highly bachelor system?

  • Redundancy, failover and monitoring

Question 33)

Which three (three) of these statements nigh the UDP protocol are True? (Select 3)

  • UDP is faster than TCP
  • UDP packets are reassembled by the receiving arrangement in whatever gild they are received
  • UDP is connectionless

Question 34)

What is one difference between a Stateful Firewall and a Side by side Generation Firewall?

  • A NGFW empathize which awarding sent a given bundle

Question 35)

You lot are concerned that your organization is really not very experienced with securing data sources. Which hosting model would require you to secure the fewest data sources?

  • SaaS

Question 36)

Hassan is an engineer who works a normal day shift from his company's headquarters in Austin, TX USA. Which two (two) of these activities raise the virtually cause for concern? (Select 2)

  • Each nighttime Hassan logs into his account from an Internet service provider in China
  • One evening, Hassan downloads all of the files associated with the new product he is working on

Question 37)

Which 3 (3) of the following are considered rubber coding practices? (Select iii)

  • Use library functions in place of OS commands
  • Avoid using Bone commands whenever possible
  • Avoid running commands through a shell interpreter

Question 38)

Which 3 (3) items should be included in the Planning step of a penetration test? (Select 3)

  • Informing Need-to-know employees
  • Establishing Boundaries
  • Setting Objectives

Question 39)

Which portion of the pentest report would cover the risk ranking, recommendations and roadmap?

  • Executive Summary

Question 40)

Spare workstations and servers, blank removable media, packet sniffers and protocol analyzers, all belong to which Incident Response resource category?

  • Incident Post-Assay Resources
  • Incident Analysis Hardware and Software

Question 41)

NIST recommends considering a number of items, including a high level of testing and monitoring, during which stage of a comprehensive Containment, Eradication & Recovery strategy?

  • Recovery

Question 42)

True or False. Digital forensics is effective in solving cyber crimes but is not considered effective in solving vehement crimes such as rape and murder.

  • False

Question 43)

Which three (3) are common obstacles faced when trying to examine forensic data? (Select 3)

  • Selecting the right tools to help filter and exclude irrelevant information
  • Finding the relevant files among the hundreds of thousands establish on most hard drives
  • Bypassing controls such as passwords

Question 44)

What scripting concept will repeatedly execute the same block of code while a specified status remains truthful?

  • Loops

Question 45)

Which 2 (2) statements well-nigh Python are truthful? (Select ii)

  • Python code is considered easy to debug compared with other popular programming languages
  • Python code is considered very readable by novice programmers

Question 46)

In the Python statement

pi="3"

What data blazon is the information type of the variable pi?

  • str

Question 47)

What will be printed past the following block of Python code?

def Add5(in)

 out=in+5

 return out

 print(Add5(10))

  • 15

Question 48)

Which threat intelligence framework was adult by the US Government to enable consistent characterization and categorization of cyberthreat events?

  • Cyber Threat Framework

Question 49)

True or False. An organization's security immune system should be integrated with outside organizations, including vendors and other 3rd-parties.

  • Truthful

Question 50)

Which iii (3) of these are amongst the top 12 capabilities that a adept data security and protection solution should provide? (Select 3)

  • Vulnerability assessment
  • Real-time alerting
  • Tokenization

Question 51)

Truthful or Fake. For iOS and Android mobile devices, users must interact with the operating system only through a series of applications, merely non directly.

  • True

Question 52)

All industries accept their own unique data security challenges. Which of these industries has a particular concern with PCI-DSS compliance while having a large number of access points staffed by low-level employees who take access to payment menu data?

  • Retail

Question 53)

True or Fake. WireShark has an impressive array of features and is distributed complimentary of charge.

  • True

Question 54)

In which component of a Common Vulnerability Score (CVSS) would privileges required be reflected?

  • Base-Exploitability Subscore

Question 55)

The Decommission step in the DevSecOps Release, Deploy & Decommission phase contains which of these activities?

  • IAM controls to regulate authority

Question 56)

Yous calculate that in that location is a ii% probability that a cybercriminal volition be able to steal credit card numbers from your online storefront which will result in $10M in losses to your company. What have y'all just adamant?

  • A risk

Question 57)

Which one of the OWASP Summit x Awarding Security Risks would be occur when an application's API exposes financial, healthcare or other PII data?

  • Sensitive data exposure

Question 58)

Which three (3) of these are Solution Edifice Blocks (SBBs)? (Select 3)

  • Virus Protection
  • Application Firewall
  • Spam Filter

Question 59)

A robust cybersecurity defense includes contributions from 3 areas, man expertise, security analytics and artificial intelligence. Rapidly analyzing big quantities of unstructured data lends itself all-time to which of these areas?

  • Bogus intelligence

Question 60)

The triad of a security operations centers (SOC) is People, Process and Engineering. Which part of the triad would network monitoring belong?

  • Technology

Question 61)

Which of these is a good definition for cyber threat hunting?

  • The act of proactively and aggressively identifying, intercepting, tracking, investigating and eliminating cyber adversaries every bit early as possible in the cyber impale concatenation

Question 62)

At that place is value brought past each of the IBM i2 EIA utilize cases. Which one of these provides immediate alerting on brand compromises and fraud on the dark web.

  • Threat Discovery

.

Question 63)

Which 3 (3) soft skills are of import to have in an system's incident response team? (Select 3)

  • Communication
  • Teamwork
  • Problem solving and Critical thinking

Question 64)

Implementing strong endpoint detection and mitigation strategies falls into which phase of the incident response lifecycle?

  • Detection & Analysis

Question 65)

Which three (3) of these statistics about phishing attacks are real? (Select three)

  • Around 15 million new phishing sites are created each month
  • Phishing accounts for nearly 20% of information breaches
  • 30% of phishing messages are opened by their targeted users

Question 66)

Which iii (3) of these control processes are included in the PCI-DSS standard? (Select 3)

  • Implement strong access command measures
  • Regularly monitor and exam networks
  • Maintain an information security policy

Question 67)

Which three (3) are malware types commonly used in PoS attacks to steal credit card data? (Select 3)

  • Alina
  • BlackPOS
  • vSkimmer

Question 68)

According to a 2019 Ponemon study, what percent of consumers indicated they would exist willing to pay more for a product or service from a provider with better security?

  • 52%

Question 69)

You get a telephone telephone call from a technician at the "Windows company" who tells you that they have detected a problem with your organization and would like to help you lot resolve it. In order to help, they demand y'all to go to a web site and download a simple utility that will allow them to fix the settings on your computer. Since you merely own an Apple Mac, yous are suspicious of this caller and hang up. What would the attack vector have been if you lot had downloaded the "unproblematic utility" as asked?

  • Remote Desktop Protocol (RDP)

Question 70)

What is an constructive fully automated way to preclude malware from entering your system as an email attachment?

  • Anti-virus software

 Question 71)

True or Imitation. The large majority of stolen credit carte du jour numbers are used apace past the thief or a member of his/her family.

  • False

Question 72)

Which 3 (3) of these are PCI-DSS requirements for any company handling, processing or transmitting credit carte du jour data? (Select 3)

  • Restrict admission to cardholder information by business concern need-to-know
  • Assign a unique ID to each person with figurer admission
  • Restrict physical access to cardholder information

Question 73)

True or Imitation. Communications of a information breach should exist handled by a team composed of members of the IR team, legal personnel and public relations.

  • Truthful

Question 74)

A Coordinating incident response team model is characterized by which of the following?

  • Multiple incident response teams within an organization all of whom coordinate their activities only within their land or department
  • Multiple incident response teams within an organization but 1 with authorization to assure consistent policies and practices are followed across all teams
  • This term refers to a structure that assures the incident response team'south activities are coordinated with senior management and all appropriate departments inside and organization

Question 75)

The cyber hunting team and the SOC analysts are informally referred to equally the ____ and ____ teams, respectively.

  • Blue Red
  • Red, Blue

Question 76)

The partnership betwixt security analysts and technology tin be said to be grouped into 3 domains, human being expertise, security analytics and artificial intelligence. The human expertise domain would contain which iii (three) of these topics?

  • Abstraction
  • Dilemmas
  • Morals

Question 77)

Solution architectures often contain diagrams like the one beneath. What does this diagram show?

<<Solution Architecture Data Flow.png>>

  • Functional components and data flow

Question 78)

Port numbers 1024 through 49151 are known as what?

  • Registered Ports

Question 79)

Which layer of the OSI model to bundle sniffers operate on?

  • Data Link

Question 80)

True or False. Internal attacks from trusted employees represents every bit equally pregnant a threat equally external attacks from professional person cyber criminals.

  • True

Question 81)

According to the FireEye Mandiant's Security Effectiveness Study 2020, what fraction of security tools are deployed with default settings and thus underperform expectations?

  • lxxx%

Question 82)

Which country had the highest average toll per breach in 2018 at $8.19M

  • United States

Question 83)

Which two (2) of these Python libraries provides useful statistical functions? (Select 2)

  • StatsModels
  • Scikit-learn

Question 84)

What will print out when this cake of Python code is run?

i=1

#i=i+one

#i=i+2

#i=i+3

impress(i)

  • 1

Question 85)

Which 3 (3) statements about Python variables are truthful? (Select 3)

  • A variable proper name must start with a letter or the underscore "_" character
  • Variables can change type after they have been set
  • Variables do not have to be declared in advance of their use

Question 86)

PowerShell is a configuration management framework for which operating organisation?

  • Windows

Question 87)

In digital forensics documenting the chain of custody of prove is critical. Which of these should be included in your chain of custody log?

  • All of the above

Question 88)

Forensic analysis should always be conducted on a re-create of the original data. Which two (2) types of copying are appropriate for getting data from a laptop acquired from a terminated employee, if you suspect he has deleted incriminating files? (Select 2)

  • An incremental fill-in
  • A logical backup

Question 89)

Which of the following would be considered an incident precursor?

  • An alert from your antivirus software indicating it had detected malware on your system
  • An announced threat against your system by a hactivist group

Question 90)

If a penetration test calls for you to create a diagram of the target network including the identity of hosts and servers as well as a listing of open ports and published services, which tool would exist the best fit for this task?

  • Nmap

Question 91)

Which type of list is considered best for safe coding do?

  • Whitelist

Question 92)

In reviewing the security logs for a company's headquarters in New York Metropolis, which of these activities should non raise much of a security concern?

  • A recently hired data scientist in the Medical Analytics department has repeatedly attempted to admission the corporate financial database
  • An employee has started logging in from dwelling for an hour or then during the last 2 weeks of each quarter

Question 93)

Information sources such every bit newspapers, books and web pages are considered which type of data?

  • Unstructured information
  • Semi-structured information
  • Structured data

Question 94)

Which iii (3) of these statements nearly the TCP protocol are True? (Select three)

  • TCP packets are reassembled by the receiving system in the order in which they were sent
  • TCP is more reliable than UDP
  • TCP is connection-oriented

Question 95)

In IPv4, how many of the iv octets are used to ascertain the network portion of the address in a Class B network?

  • 2

Question 96)

A small company with 25 computers wishes to connect them to the Internet using a NAT router. How many Public IP addresses will this visitor need to assure all 25 computers can communicate with each other and other systems on the Net if they implement Port Address Translations?

  • 1

Question 97)

Why is symmetric key encryption the nigh common choice of methods to encryptic data at rest?

  • In that location are far more keys available for utilize
  • It is much faster than asymmetric key encryption

Question 98)

Which of the following statements about hashing is Truthful?

  • Hashing uses algorithms that are known as "one-way" functions

Question 99)

Why is hashing not a common method used for encrypting data?

  • Hashing is a one-mode process and then the original data cannot be reconstructed from a hash value

Question 100)

Public central encryption incorporating digital signatures ensures which of the following?

  • Confidentiality and Integrity

Question 101)

What is the primary authentication protocol used by Microsoft in Active Directory?

  • Kerberos

Question 102)

Granting access to a user account simply those privileges necessary to perform its intended functions is known every bit what?

  • The principle of least privileges

Question 103)

What is the virtually mutual patch remediation frequency for nigh organizations?

  • Monthly
  • Annually

Question 104)

Isle hopping is an attack method commonly used in which scenario?

  • Supply Chain Infiltration
  • Blocking access to a website for all users
  • Compromising a corporate VIP
  • Trojan Horse attacks

Question 105)

Security training for IT staff is what type of control?

  • Virtual
  • Operational
  • Physical

Question 106)

Which security concerns follow your workload even after information technology is successfully moved to the cloud?

  • All of the higher up

Question 107)

Which form of Cloud computing combines both public and private clouds?

  • Hybrid cloud

Question 108)

Which component of the Linux operating system interacts with your figurer's hardware?

  • The kernel

Question 109)

The encryption and protocols used to forbid unauthorized access to data are examples of which type of access control?

  • Technical

Question 110)

In cybersecurity, Authenticity is divers as what?

  • The property of being 18-carat and verifiable

Question 111)

ITIL is best described as what?

  • A collection of It Service Management best practices

Question 112)

Which position is in charge of testing the security and effectiveness of figurer data systems?

  • Information Security Accountant

Question 113)

A company wants to prevent employees from wasting time on social media sites. To reach this, a document forbidding apply of these sites while at work is written and circulated and so the firewalls are updated to block access to Facebook, Twitter and other popular sites. Which two (two) types of security controls has the company merely implemented? (Select 2)

  • Administrative
  • Technical

Question 114)

An email message that is encrypted, uses a digital signature and carries a hash value would address which aspects of the CIA Triad?

Confidentiality and Integrity

Question 115)

What would a piece of malicious lawmaking that gets installed on a computer and reports back to the controller your keystrokes and other information it can gather from your arrangement exist called?

  • Spyware

Question 116)

Fancy Bears and Bearding are examples of what?

  • Hacking organizations

Question 117)

Select the reply the fills in the blanks in the right society.

A weakness in a organisation is a/an ____. The potential danger associated with this is a/an ____ that becomes a/an ____ when attacked by a bad histrion.

  • vulnerability, threat, exploit
  • threat, exposure, chance
  • threat actor, vulnerability, exposure

Question 118)

Implement a filter to remove flooded packets earlier they attain the host is a countermeasure to which form of attack?

  • A Denial of Service (DoS) attack

Question 119)

Trudy intercepts a romantic plainly-text message from Alice to her swain Sam. The message upsets Trudy and then she forward it to Bob, making it look like Alice intended it for Bob from the showtime. Which aspect of the CIA Triad has Trudy violated ?

  • All of the above

Question 120)

Which cistron contributes nearly to the strength of an encryption system?

  • How many people have access to your public key
  • The length of the encryption central used
  • The number of private keys used past the system

Question 121)

What is an advantage asymmetric key encryption has over symmetric primal encryption?

  • Asymmetric keys can be exchanged more than securely than symmetric keys
  • Asymmetric cardinal encryption is harder to break than symmetric cardinal encryption
  • Asymmetric primal encryption is faster than symmetric key encryption

Question 122)

Which position is responsible for the "ethical hacking" of an organizations estimator systems?

  • A Penetration Tester

Question 123)

Which three (3) are considered all-time practices, baselines or frameworks? (Select three)

  • ISO27000 series
  • ITIL
  • COBIT

Question 124)

What does the "A" in the CIA Triad represent?

  • Availability

Question 125)

Which blazon of access control is based upon the bailiwick's clearance level and the objects classification?

  • Hierarchical Admission Control (HAC)
  • Discretionary Access Control (DAC)
  • Mandatory Access Control (MAC)
  • Role Based Access Control (RBAC)

Question 126)

Windows ten stores 64-bit applications in which directory?

  • \Program Files

Question 127)

To build a virtual calculating environment, where is the hypervisor installed?

  • Between the applications and the information sources
  • On the cloud'due south supervisory organisation
  • Between the hardware and operating organisation
  • Between the operating system and applications

Question 128)

An identical e-mail sent to millions of addresses at random would be classified as which type of attack?

  • A Shark attack
  • A Phishing attack

Question 129)

Which statement about drivers running in Windows kernel way is true?

  • Only critical processes are permitted to run in kernel mode since there is zippo to prevent a

Question 130)

Symmetric key encryption by itself ensures which of the following?

  • Confidentiality and Integrity
  • Confidentiality just
  • Confidentiality and Availability

Question 131)

Which argument best describes configuring a NAT router to use dynamic mapping?

  • The system volition need as many registered IP addresses as it has computers that need Internet admission
  • Many registered IP addresses are mapped to a single registered IP address using different port numbers
  • Unregistered IP addresses are mapped to registered IP addresses as they are needed
  • The NAT router uses each figurer's IP address for both internal and external communication

Question 132)

Which address type does a computer use to get a new IP address when information technology boots up?

  • The network's DHCP server accost

Question 133)

What is the principal difference between the IPv4 and IPv6 addressing schema?

  • IPv6 is significantly faster than IPv4
  • IPv6 is used merely for IOT devices
  • IPv6 allows for billions of times equally many possible IP addresses

Question 134)

Which blazon of firewall understands which session a packet belongs to and analyzes it accordingly?

  • A Adjacent Generation Firewall (NGFW)

Question 135)

An employee calls the IT Helpdesk and admits that possibly, just possibly, the links in the email he clicked on this morning time were not from the existent Lottery Commission. What is the first thing you lot should tell the employee to exercise?

  • Run a Port scan
  • Run an antivirus scan

Question 136)

A penetration tester involved in a "Black box" assault would be doing what?

  • Attempting to penetrate a client's systems as if she were an external hacker with no inside knowled

Question 137)

Which Mail Incident action would be concerned with maintaining the proper chain-of-custody?

  • Lessons learned meeting
  • Evidence memory
  • Documentation review & update
  • Utilizing collected information

Question 138)

In digital forensics, which three (three) steps are involved in the collection of data? (Select iii)

  • Develop a plan to larn the information
  • Verify the integrity of the data
  • Learn the data

Question 139)

Which iii (3) of the post-obit are considered scripting languages? (Select three)

  • Perl
  • Bash
  • Python

Question 140)

What is the largest number that will exist printed during the execution of this Python while loop?

i=0

while (i<x):

 print(i)

 i=i+1

  • 9

Question 141)

Activities performed as a part of security intelligence can exist divided into pre-exploit and post-exploit activities. Which ii (ii) of these are post-exploit activities? (Select ii)

  • Gather full situational awareness through advanced security analytics
  • Perform forensic investigation

Question 142)

At that place are many good reasons for maintaining comprehensive backups of critical information. Which aspect of the CIA Triad is nearly impacted by an organization's backup practices?

  • Availability
  • Integrity
  • Authorization

Question 143)

Which phase of DevSecOps would contain the activities Internal/External testing, Continuous assurance, and Compliance checking?

  • Test
  • Lawmaking & build
  • Operate & monitor
  • Programme

Question 144)

Which one of the OWASP Top ten Application Security Risks would be occur when in that location are no safeguards against a user being allowed to execute HTML or JavaScript in the user's browser that can hijack sessions.

  • Cross-site scripting

Question 145)

SIEM license costs are typically calculated based upon which ii (two) factors? (Select 2)

  • Flows per minute (FPM)
  • Events per second (EPS)

Question 146)

True or False. If you have no better place to outset hunting threats, showtime with a view of the global threat landscape and and so drill down to a regional view, industry view and finally a view of the threats specific to your own organization.

  • True

Question 147)

True or Faux. Cloud-based storage or hosting providers are among the top sources of third-party breaches

  • True

Question 148)

Yous are looking very hard on the web for the everyman mortgage interest load you can detect and you meet a rate that is so low it could not peradventure be true. Yous check out the site to run across that the terms are and quickly find yous are the victim of a ransomware attack. What was the likely attack vector used past the bad actors?

  • Phishing
  • Malicious Links
  • Software Vulnerabilities

Question 149)

Very provocative articles that come up in news feeds or Google searches are sometimes chosen "click-bait". These articles frequently tempt you to link to other sites that tin can be infected with malware. What assail vector is used by these click-bait sites to get you lot to become to the really bad sites?

  • Malicious Links

More New Questions

Question 150)

Which of the following defines a security threat?

  • Any potential danger capable of exploiting a weakness in a system
  • The likelihood that the weakness in a system volition exist exploited
  • 1 instance of a weakness being exploited
  • A weakness in a organization that could be exploited by a bad actor

Question 151)

Suspicious activity, similar IP addresses or ports being scanned sequentially, is a sign of which blazon of attack?

  • A mapping assail
  • A denial of service (DoS) assail
  • A phishing attack
  • An IP spoofing attack

Question 152)

Alice sends a message to Bob that is intercepted by Trudy. Which scenario describes a confidentiality violation?

  • Trudy deletes the message without forwarding it
  • Trudy cannot read it because it is encrypted but allows it to exist delivered to Bob in its original grade
  • Trudy changes the bulletin and then frontwards it on
  • Trudy reads the bulletin

Question 153)

Which regulation contains the security rule that requires all covered entities to maintain reasonable and appropriate administrative, technical, and concrete safeguards for protecting electronic protected health information (e-PHI)?

  • PCI-DSS
  • ISO27000 series
  • HIPAA
  • GDPR
  • NIST 800-53A

Question 154)

A good Endpoint Detection and Response system (EDR) should accept which 3 (3) of these capabilities? (Select iii)

  • Automatically quarantine noncompliant endpoints
  • Manage encryption keys for each endpoint
  • Manage thousands of devices at once
  • Deploying devices with network configurations

Question 155)

Which argument well-nigh encryption is Truthful about data in use.

  • Data should always be kept encrypted since modern CPUs are fully capable of operating directly on encrypted data
  • It is vulnerable to theft and should be decrypted just for the briefest possible time while it is being operated on
  • Curt of orchestrating a memory dump from a system crash, there is no practical way for malware to get at the data being processed, so dump logs are your only real concern
  • Data in agile memory registers are not at hazard of existence stolen

Question 156)

For added security you decide to protect your network past conducting both a stateless and stateful inspection of incoming packets. How can this be washed?

  • This cannot be washed The network administrator must choose to run a given network segment in either stateful or stateless mode, and so select the respective firewall type
  • Install a single firewall that is capable of conducting both stateless and stateful inspections
  • Install a stateful firewall only These avant-garde devices audit everything a stateless firewall inspects in addition to country related factors
  • You must install 2 firewalls in series, so all packets pass through the stateless firewall first and then the stateless firewall

Question 157)

In IPv4, how many of the 4 octets are used to define the network portion of the address in a Course A network?

  • 2
  • 1
  • 4
  • 3

Question 158)

If you take to rely upon metadata to work with the information at hand, you are probably working with which type of data?

  • Meta-structured data
  • Semi-structured data
  • Structured data
  • Unstructured information

Question 159)

Which two (ii) forms of discovery must exist conducted online? (Select 2)

  • Port scanning
  • Shoulder surfing
  • Social technology
  • Packet sniffing

Question 160)

Which Incident Response Team model describes a team that runs all incident response activities for a company?

  • Distributed
  • Central
  • Coordinating
  • Control

Question 161)

Which is the data protection process that prevents a suspicious data request from existence completed?

  • Data take chances analysis
  • Data nomenclature
  • Data discovery
  • Blocking, masking and quarantining

Question 162)

Which class of penetration testing allows the testers fractional knowledge of the systems they are trying to penetrate in advance of their assail to streamline costs and focus efforts?

  • Red Box Testing
  • Gray Box Testing
  • White Box testing
  • Blackness Box Testing

Question 163)

Which type of awarding attack would include User denies performing an operation, attacker exploits an application without trace, and aggressor covers her tracks?

  • Auditing and logging
  • Authentication
  • Authorization
  • Input validation

Question 164)

True or False. Thorough reconnaissance is an important step in developing an effective cyber kill chain.

  • True
  • False

Question 165)

True or False. One of the master challenges in cyber threat hunting is a lack of useful tools sold past likewise few vendors.

  • Truthful
  • False

Question 166)

True or False. A large visitor has a data breach involving the theft of employee personnel records but no customer data of any kind. Since no external data was involved, the company does not take to report the alienation to police enforcement.

  • True
  • False

Question 167)

Y'all are the CEO of a big tech company and have just received an angry email that looks like it came from 1 of your biggest customers. The email says your company is overbilling the customer and asks that you examine the attached invoice. You do just find it blank, so you respond politely to the sender request for more details. You never hear back, but a week later your security team tells you that your credentials have been used to access and exfiltrate big amounts of company financial information. What kind of assault did you fall victim to?

  • As a phishing assail
  • Every bit a whale attack
  • A shark attack
  • A fly phishing set on

Question 168)

Which of these statements about the PCI-DSS requirements for whatsoever company handling, processing or transmitting credit menu data is true?

  • Muti-factor authentication is required for all new card holders
  • Some course of mobile device management (MDM) must be used on all mobile credit carte processing devices
  • All employees with directly access to cardholder data must be bonded
  • Cardholder data must exist encrypted if information technology is sent beyond open or public networks

Which Incident Response Team model describes a team that acts as consulting experts to propose local IR teams?

  • Control
  • Coordinating
  • Distributed
  • O Central

In a Linux file system, which files are contained in the \bin folder?

  • All user binary files, their libraries and headers
  • Executable files such as grep and ping
  • Configuration files such as fstab and inittab
  • Directories such as /home and /usr

If a computer needs to transport a message to a system that is not part of the local network, where does information technology transport the message?

  • To the system's domain name
  • To the system's IP accost
  • The network's DNS server accost
  • To the system's MAC address
  • The network's default gateway address
  • The network'due south DHCP server address

Which three (3) of these statements about the TCP protocol are True? (Select 3)

  • TCP is faster than UDP
  • TCP is connection-oriented
  • TCP packets are reassembled by the receiving arrangement in the order in which they were sent
  • TCP is more than reliable than UDP

A professor is not immune to change a student's final course subsequently she submits it without completing a special form to explain the circumstances that necessitated the change. This additional pace supports which aspect of the CIA Triad?

  • Authority
  • Integrity
  • Confidentiality
  • Availability

Which of these is the all-time definition of a security risk?

  • An instance of beingness exposed to losses
  • Whatever potential danger that is associated with the exploitation of a vulnerability
  • A weakness in a system
  • The likelihood of a threat source exploiting a vulnerability

Trudy intercepts a plain text message sent past Alice to Bob, but in no mode interferes with its delivery. Which aspect of the CIA Triad was violated?

  • Confidentiality
  • Integrity
  • Availability
  • All of the above

What is an advantage symmetric key encryption has over disproportionate central encryption?

  • Symmetric key encryption provides better security against Human being-in-the-eye attacks than is possible with asymmetric key encryption
  • Symmetric key encryption is faster than disproportionate fundamental encryption
  • Symmetric keys can exist exchanged more securely than asymmetric keys
  • Symmetric central encryption is harder to pause than asymmetric key encryption

Which type of application attack would include network eavesdropping, lexicon attacks and cookie replays?

  • Configuration management
  • Authentication
  • Dominance
  • Exception management

Why should you ever look for common patterns earlier starting a new security architecture design?

  • They can help identify all-time practices
  • They can shorten the development lifecycle
  • Some document complete tested solutions
  • All of the above

Terminal Update: 09/12/2021

Alarm: Jo Respond Green hai wo right hai but

Jo Dark-green Nahi hai. Usme se jo ek wrong choice tha usko hata diya hai

Please WAIT I Volition ADD MORE NEW QUETIONS..

Besides if you accept Questions with correct answer  Transport me on my Electronic mail i will update on my blog..

niyander111@gmail.com

Cheers...